Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KWSOAEcbSIvu1Y8Nb92acTxKLIE.roa
File: KWSOAEcbSIvu1Y8Nb92acTxKLIE.roa (raw, json)
Hash identifier: NWZhXMy85V8NJzE8OwBEOogfIVrSX561je926zQEDPk=
Subject key identifier: 29:64:8E:00:47:1B:48:8B:EE:D5:8F:0D:6F:DD:9A:71:3C:4A:2C:81
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0743E38E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KWSOAEcbSIvu1Y8Nb92acTxKLIE.roa
Signing time: Sat 21 May 2022 03:30:29 +0000
ROA not before: Sat 21 May 2022 03:30:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121889678 (0x743e38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 21 03:30:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29648e00471b488beed58f0d6fdd9a713c4a2c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:6c:62:6d:fb:d4:54:2b:14:22:42:96:e5:
b1:fd:64:04:5f:3a:56:a4:17:93:a9:38:eb:bc:38:
2e:19:06:31:ef:2b:3f:77:80:64:70:8d:31:dd:ce:
d8:70:65:ec:36:61:93:29:04:0d:35:5c:2b:a9:e0:
90:fd:c7:4c:c8:7b:d0:45:42:e9:9f:5e:1d:64:66:
87:ac:a6:18:3f:bc:6a:c3:7f:e3:09:78:5c:32:74:
30:d1:68:6e:3c:1f:78:b9:bb:da:ce:b3:83:a4:95:
fb:94:71:8d:0a:f3:a9:6d:35:49:08:f4:b7:35:b1:
1a:d0:28:ca:8c:90:e8:05:d1:46:da:9f:e8:64:94:
1f:be:e1:0b:60:6c:3b:f9:97:2d:fc:e5:1b:dc:9d:
d9:e6:bf:31:16:0c:09:5e:89:07:0a:7c:d0:63:5a:
f2:22:5a:22:16:12:c4:78:cf:51:b0:d2:4f:44:24:
ca:86:b3:ef:06:81:be:e0:7f:5f:42:cf:eb:37:d2:
82:c6:c2:ce:a1:80:01:e1:42:ea:38:58:18:7a:ef:
d5:61:7c:ad:2c:fc:3b:c1:3e:e5:1a:d1:03:96:a8:
90:d5:8f:07:ef:f6:80:72:75:37:f8:84:d1:ab:50:
67:e5:3b:e6:08:fe:d9:eb:ec:9d:6f:a0:37:f8:51:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:8E:00:47:1B:48:8B:EE:D5:8F:0D:6F:DD:9A:71:3C:4A:2C:81
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KWSOAEcbSIvu1Y8Nb92acTxKLIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
84:49:5f:86:fc:5a:18:87:f8:45:ca:9c:48:ac:b4:9f:f4:a6:
02:e4:b3:88:c1:62:2b:21:a6:ea:ef:b0:aa:69:ea:22:77:9f:
1c:7e:c1:c8:8e:bd:2b:fc:6e:48:20:c1:55:56:88:9b:5c:d9:
ee:c2:15:7d:e2:6e:0f:4e:ee:e0:08:56:ba:6d:52:a9:dc:58:
4d:b2:17:1b:4b:ba:74:bb:1c:c6:49:38:4a:01:d4:e6:1d:e5:
3f:63:27:ef:85:ed:41:cd:ac:5b:8a:87:40:33:3d:7b:6f:45:
7f:a3:36:d0:e5:43:05:78:a7:9b:60:70:ba:32:a7:7e:35:fb:
55:40:c3:79:5d:41:ff:d3:0e:26:28:2c:fb:0f:cd:1e:68:3e:
03:84:31:9c:ed:16:ee:54:7f:bb:80:f8:43:9e:1f:f1:c5:7e:
cd:72:2d:3d:dc:db:25:20:9c:53:07:df:6c:9f:47:9a:90:e4:
10:df:97:e7:31:3c:b1:91:59:f5:b0:c5:6b:be:83:21:d7:7a:
cf:56:ad:d7:ac:b1:9b:32:bd:2a:dc:fb:2b:21:05:e9:e7:67:
19:e0:78:3a:e3:30:5e:53:11:1f:13:c5:cc:28:8f:5e:f0:f3:
d3:b2:5f:fb:ad:2a:d8:42:97:f1:c4:6f:ce:d5:23:28:76:b4:
e9:25:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:31 2025 by rpki-client